This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/7govs0WCyjg5wwJ4Lwd5TvIwb8Q.roa File: 7govs0WCyjg5wwJ4Lwd5TvIwb8Q.roa (raw, json) Hash identifier: OGSpoOfbnujXgA13Y9803ByJNfvBnyQq9VcU8i/EB6s= Subject key identifier: EE:0A:2F:B3:45:82:CA:38:39:C3:02:78:2F:07:79:4E:F2:30:6F:C4 Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6 Certificate serial: 019B7C120DBAEB5D4E877A8BE0672DADF413 Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/7govs0WCyjg5wwJ4Lwd5TvIwb8Q.roa Signing time: Fri 02 Jan 2026 00:18:36 +0000 ROA not before: Fri 02 Jan 2026 00:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203825 IP address blocks: 185.122.188.0/23 maxlen: 23 185.122.190.0/23 maxlen: 23 193.110.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:0d:ba:eb:5d:4e:87:7a:8b:e0:67:2d:ad:f4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6 Validity Not Before: Jan 2 00:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee0a2fb34582ca3839c302782f07794ef2306fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:9f:89:e5:31:6e:53:bc:e6:35:f0:d5:c0: 50:a6:18:18:52:93:d3:de:4e:59:6b:1d:0e:45:0a: 72:0c:bb:e0:4a:66:97:2b:ac:75:34:b4:75:e9:2d: 16:03:e3:cc:d3:de:af:5d:50:cc:76:98:39:c3:c5: 90:d4:2c:bd:4f:11:19:21:5e:98:48:30:66:cd:99: 0c:4a:7f:70:a6:ae:e9:7f:54:4a:c5:a5:97:a1:7c: 35:12:c6:2c:8d:4c:91:7b:c1:bd:02:b2:7a:a1:9f: 1d:32:c7:0c:1b:2a:ee:46:b1:57:c0:d6:47:cc:51: 56:dc:96:e1:38:23:cb:88:dd:40:f5:02:ea:7a:17: e7:ba:20:f6:41:41:b7:4b:6d:b2:6f:a3:c1:be:7d: 82:27:e4:a7:ba:08:32:18:b7:c8:41:23:5a:c8:5e: 95:89:2a:f2:bb:2a:89:9a:9f:74:19:0d:6e:10:ac: db:6f:32:0d:16:c0:fc:6c:b2:9f:be:74:7e:86:cd: 46:f7:4c:ac:6b:28:01:1e:0d:63:d7:0a:fa:51:da: 8b:66:e7:7b:40:f4:07:07:ea:3c:84:26:f5:45:2b: 94:fa:f6:61:53:c1:c2:8c:10:c6:5e:47:09:b2:03: 26:f1:41:49:09:a7:ee:ae:50:b5:ac:ee:20:57:a0: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0A:2F:B3:45:82:CA:38:39:C3:02:78:2F:07:79:4E:F2:30:6F:C4 X509v3 Authority Key Identifier: keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/7govs0WCyjg5wwJ4Lwd5TvIwb8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.188.0/22 193.110.196.0/22 Signature Algorithm: sha256WithRSAEncryption 35:d2:31:2f:9d:d7:27:e5:85:d3:34:d3:0f:5f:6a:39:a6:cc: 97:38:57:24:13:20:99:80:23:1d:88:7c:16:97:5b:67:a4:36: e3:f9:47:41:00:e5:d1:9a:36:6c:bc:09:2e:45:b2:88:ca:6d: 2d:f7:34:83:94:ea:3a:b1:83:22:cf:6f:b9:62:e4:09:07:c7: 4b:b9:8d:7e:04:7a:a0:80:11:16:ad:3a:2a:75:fc:0a:7b:b7: ca:2c:2a:8d:d8:0f:5d:59:5b:d2:44:96:53:49:54:e7:77:ec: 34:ef:30:02:a5:1d:33:f7:d8:69:c8:66:da:dc:d9:4e:53:8e: 91:b1:d5:9e:82:c4:5d:45:e0:59:b5:5b:1c:82:7c:1c:59:e2: 4c:c2:3d:93:e4:bc:c9:a7:a4:74:9e:8c:a4:83:59:50:4f:23: ba:21:cd:01:41:e0:c7:fe:c3:0d:50:4e:08:50:e5:bd:8b:56: d1:6b:3c:8f:e4:6e:4c:c3:f6:48:38:40:fa:12:af:95:f5:7c: e2:be:28:f3:e9:84:a4:07:56:5c:02:b4:e1:6b:f9:0c:f5:01: 70:38:91:fb:35:e6:aa:f5:eb:13:36:56:ee:21:87:bf:22:5a: 28:b7:39:5f:81:49:96:ce:af:45:39:ba:f7:a8:e1:82:84:19: be:b3:8e:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eg26611Oh3qL4GctrfQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZGMzNjQxNGM5OTFiZmE4ZDkyZjYwMjdlNTMwODM3MGIy MmI2YTYwHhcNMjYwMTAyMDAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTBhMmZiMzQ1ODJjYTM4MzljMzAyNzgyZjA3Nzk0ZWYyMzA2ZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss6fieUxblO85jXw1cBQphgYUpPT 3k5Zax0ORQpyDLvgSmaXK6x1NLR16S0WA+PM096vXVDMdpg5w8WQ1Cy9TxEZIV6Y SDBmzZkMSn9wpq7pf1RKxaWXoXw1EsYsjUyRe8G9ArJ6oZ8dMscMGyruRrFXwNZH zFFW3JbhOCPLiN1A9QLqehfnuiD2QUG3S22yb6PBvn2CJ+SnuggyGLfIQSNayF6V iSryuyqJmp90GQ1uEKzbbzINFsD8bLKfvnR+hs1G90ysaygBHg1j1wr6UdqLZud7 QPQHB+o8hCb1RSuU+vZhU8HCjBDGXkcJsgMm8UFJCafurlC1rO4gV6DzawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO4KL7NFgso4OcMCeC8HeU7yMG/EMB8GA1UdIwQY MBaAFH3cNkFMmRv6jZL2An5TCDcLIramMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmR3MlFVeVpHX3FOa3ZZQ2ZsTUlOd3NpdHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hYWNkY2MtYWExNy00MmY4LTlhZGUt N2MzNzlhNTUxYzEyLzEvN2dvdnMwV0N5amc1d3dKNEx3ZDVUdkl3YjhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9hYWNkY2MtYWExNy00MmY4LTlhZGUtN2MzNzlhNTUxYzEy LzEvZmR3MlFVeVpHX3FOa3ZZQ2ZsTUlOd3NpdHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuXq8AwQC wW7EMA0GCSqGSIb3DQEBCwUAA4IBAQA10jEvndcn5YXTNNMPX2o5psyXOFckEyCZ gCMdiHwWl1tnpDbj+UdBAOXRmjZsvAkuRbKIym0t9zSDlOo6sYMiz2+5YuQJB8dL uY1+BHqggBEWrToqdfwKe7fKLCqN2A9dWVvSRJZTSVTnd+w07zACpR0z99hpyGba 3NlOU46RsdWegsRdReBZtVscgnwcWeJMwj2T5LzJp6R0noykg1lQTyO6Ic0BQeDH /sMNUE4IUOW9i1bRazyP5G5Mw/ZIOED6Eq+V9Xzivijz6YSkB1ZcArTha/kM9QFw OJH7Neaq9esTNlbuIYe/IlootzlfgUmWzq9FObr3qOGChBm+s47F -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:09 2026 by rpki-client